JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 173.239.216.18

173.239.216.18 was found in our database!

This IP was reported 99 times. Confidence of Abuse is 34%: ?

34%

ISP	LogicWeb Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	logicweb.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 173.239.216.18

Whois 173.239.216.18

IP Abuse Reports for 173.239.216.18:

This IP address has been reported a total of 99 times from 52 distinct sources. 173.239.216.18 was first reported on August 14th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Yepngo	2026-08-12 23:25:01 (1 week ago)	173.239.216.18 - - [13/Aug/2026:00:40:16 +0200] "POST /wp-login.php HTTP/2.0" 200 11369 "-" "Mozilla ... show more 173.239.216.18 - - [13/Aug/2026:00:40:16 +0200] "POST /wp-login.php HTTP/2.0" 200 11369 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" 173.239.216.18 - - [13/Aug/2026:01:25:01 +0200] "POST /wp-login.php HTTP/2.0" 200 11368 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" ... show less	Brute-Force Web App Attack
🇩🇪 LRob	2026-08-10 09:43:43 (1 week ago)	WordPress probing \| req: /xmlrpc.php \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML ... show more WordPress probing \| req: /xmlrpc.php \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 show less	Brute-Force Web App Attack
🇮🇹 VHosting	2026-08-10 08:45:03 (1 week ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇸🇮 administrator	2026-08-05 22:08:30 (2 weeks ago)	2026-08-05 00:08:01,577 fail2ban.actions [1590202]: NOTICE [apache-badbots] Ban 173.239.216. ... show more 2026-08-05 00:08:01,577 fail2ban.actions [1590202]: NOTICE [apache-badbots] Ban 173.239.216.18 2026-08-05 00:08:01,577 fail2ban.actions [1590202]: NOTICE [apache-badbots] Ban 173.239.216.18 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇸🇮 administrator	2026-07-24 22:02:19 (4 weeks ago)	2026-07-22 11:44:10,986 fail2ban.actions [1132]: NOTICE [apache-badbots] Ban 173.239.216.18 ... show more 2026-07-22 11:44:10,986 fail2ban.actions [1132]: NOTICE [apache-badbots] Ban 173.239.216.18 2026-07-22 11:44:10,986 fail2ban.actions [1132]: NOTICE [apache-badbots] Ban 173.239.216.18 2026-07-22 11:44:10,986 fail2ban.actions [1132]: NOTICE [apache-badbots] Ban 173.239.216.18 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇩🇪 todix	2026-07-22 06:58:51 (1 month ago)	Web App Attack Exploid from 173.239.216.18	Web App Attack
🇫🇷 Octopuce	2026-07-10 13:32:12 (1 month ago)	Aggressive web search of vulnerable pages: /jsonq.php /gel4y.php /tiny.php /file.php /alfa.php /403. ... show more Aggressive web search of vulnerable pages: /jsonq.php /gel4y.php /tiny.php /file.php /alfa.php /403.php /m.php /a.php /1.php /x.php /ws.php ... show less	Web App Attack
🇩🇪 raph	2026-07-10 04:56:29 (1 month ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
🇯🇵 demonsword	2026-07-07 11:31:29 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.expressapisv2.net:443 show less	Open Proxy Port Scan
🇬🇧 consul.to	2026-04-29 16:41:35 (3 months ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 Octopuce	2026-04-29 11:32:28 (3 months ago)	Aggressive web search of vulnerable pages: /templates/protostar/error.php /libraries/joomla/jmails.p ... show more Aggressive web search of vulnerable pages: /templates/protostar/error.php /libraries/joomla/jmails.php /wp-content/plugins/three-column-screen- ... show less	Web App Attack
🇫🇮 YF	2026-04-28 00:02:35 (3 months ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
🇸🇬 pusathosting.com	2026-04-27 20:51:04 (3 months ago)	24ds22 bruteforce	Brute-Force Web App Attack
🇬🇧 consul.to	2026-04-26 00:02:05 (3 months ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-04-21 05:54:32 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 173.239.216.18 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 173.239.216.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 01:54:26.728949 2026] [security2:error] [pid 285110:tid 285110] [client 173.239.216.18:41141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fgrotary.org"] [uri "/.git/execute.php"] [unique_id "aecREgYziMQ5P_hvAkvvtAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 99 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 116.110.9.108

🇨🇳 101.206.107.245

🇷🇴 193.32.162.84

🇧🇷 189.63.235.13

🇺🇸 162.216.150.59

🇺🇸 147.185.132.193

🇮🇳 103.168.94.28

🇺🇸 66.132.172.203

🇧🇷 45.187.234.117

🇳🇱 45.148.10.152

🇨🇦 20.104.104.62

🇪🇸 185.210.17.5

🇺🇸 162.216.150.80

🇫🇮 147.185.133.80

🇧🇩 131.186.50.157

🇺🇸 92.71.125.45

🇬🇧 81.134.37.64

🇺🇸 66.132.224.223

🇺🇸 64.62.156.169

🇫🇷 46.105.132.33